seckey 0.2.0

Use `memsec` protected secret memory.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63

use std::fmt;
use std::ptr::copy;
use std::mem::{ uninitialized, size_of, size_of_val };
use memsec::{ memzero, memcmp, mlock, munlock };


/// Temporary Key.
///
/// ```
/// use seckey::Key;
///
/// let key = Key::<[u8; 8]>::new(&[8; 8]);
/// assert_eq!(key, [8u8; 8]);
/// ```
pub struct Key<T: Sized>(pub T);

impl<T> Key<T> where T: Sized {
    pub fn new(t: &T) -> Key<T> {
        let mut memo = unsafe { uninitialized() };
        unsafe {
            mlock(&mut memo, size_of::<T>());
            copy(t, &mut memo, 1);
        }
        Key(memo)
    }
}

impl<T> From<T> for Key<T> {
    #[inline]
    fn from(mut t: T) -> Key<T> {
        let output = Key::new(&t);
        unsafe { memzero(&mut t, size_of::<T>()) };
        output
    }
}

impl<T> fmt::Debug for Key<T> {
    fn fmt(&self, f: &mut fmt::Formatter) -> fmt::Result {
        write!(f, "{}", "** tmp key **")
    }
}

impl<T: Sized, X: ?Sized> PartialEq<X> for Key<T> {
    fn eq(&self, rhs: &X) -> bool {
        if size_of::<T>() == size_of_val(rhs) {
            unsafe { memcmp(
                &self.0 as *const T as *const u8,
                rhs as *const X as *const u8,
                size_of::<T>()
            ) == 0 }
        } else {
            false
        }
    }
}

impl<T> Eq for Key<T> {}

impl<T> Drop for Key<T> where T: Sized {
    fn drop(&mut self) {
        unsafe { munlock(&mut self.0, size_of::<T>()) };
    }
}